Catalog Home Page

A policy language for abstraction and automation in application-oriented access controls: The Functionality-based application confinement policy language

Schreuders, Z.C., Payne, C. and McGill, T.J. (2011) A policy language for abstraction and automation in application-oriented access controls: The Functionality-based application confinement policy language. In: IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY 2011) , 6 - 8 June 2011, Pisa, Italy pp. 113-116.

[img]
Preview
PDF - Authors' Version
Download (84kB) | Preview
    Link to Published Version: http://dx.doi.org/10.1109/POLICY.2011.11
    *Subscription may be required

    Abstract

    This paper presents a new policy language, known as functionality-based application confinement policy language (FBAC-PL). FBAC-PL takes a unique approach to expressing application-oriented access control policies. Policies for restricting applications are defined in terms of the features applications provide, by means of parameterised and hierarchical policy abstractions known as functionalities. Policies also include metadata for management and the automation of policy specification. The result is a novel scheme for application confinement policy that reuses, encapsulates and abstracts policy details, and facilitates a priori policy specification: that is, without having to rely solely on learning modes for creating policies to restrict applications. This paper presents the policy language, and illustrates its use with examples. A Linux-based implementation, which uses FBAC-PL, has demonstrated that this approach can overcome policy complexity and usability issues of previous schemes.

    Publication Type: Conference Paper
    Murdoch Affiliation: School of Information Technology
    Publisher: IEEE
    Copyright: 2011 IEEE
    Conference Website: http://www.policy-workshop.org/
    Notes: Appears In: Policies for Distributed Systems and Networks (POLICY), 2011
    URI: http://researchrepository.murdoch.edu.au/id/eprint/4371
    Item Control Page

    Downloads

    Downloads per month over past year